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Amendments to the Claims 



1 . (CURRENTLY AMENDED) A method of verifying the knowledge of 
a secret number s in a prover devicefiO) by a verifier device(30) having no knowledge 
of the secret number, with a zero-knowledge protocol using the Montgomery 
representation of numbers and Montgomery multiplication operations therein. 

2. (ORIGINAL) The method of claim 1 in which the zero knowledge 
protocol is the Fiat- Shamir protocol. 

3. (ORIGINAL) The method of claim 1 in which the zero knowledge 
protocol is the Guillou-Quisquater protocol. 

4. (CURRENTLY AMENDED) The method of claim 2 including the 
steps of: 

(i) providingft02) to the verifier device(40) a value v = being the 
Montgomery multiplication of the secret number s by itself; 

(ii) computing-{4£6), by the prover device, the value x = r x m r, where r is 
a random number and transmitting the value of x to the verifier device; 

(iii) selecting-(+0&), by the verifier device, a challenge value of e from the 
set {0, 1 } and transmitting the challenge value to the prover device; 

(iv) computing-(H-0), by the prover device, the valuer = r x m s e and 
transmitting the value >> to the verifier device; and 

(v) the verifier devicefiO) checking the authenticity of the prover' s 
response according to the values of x, y and v previously received and according to the 
challenge value e. 

5. (CURRENTLY AMENDED) The method of claim 4 wherein the step 
of checking the authenticity of the prover' s response comprises the steps of: 

for a challenge value of e = 1, computing(445) the values ofy x m y and v x m x 
and checking£I-46) that they are the same; or 
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for a challenge value of e = 0, computingf450) the value ofy x m y and 
checkingfi2+) that it is the same as the previously received value of x. 

6. (CURRENTLY AMENDED) The method of claim 4 or claim 5 further 
including the steps of repeating steps (ii) to (v) for a number of consecutive rounds to 
confirm the authenticity of the prover device. 

7. (CURRENTLY AMENDED) The method of claim 4 or claim 5 in 
which the secret number s is a Montgomery representation of another number s ' 
known in the prover device domain but not in the verifier device domain, further 
including the step of computing, by the prover device, the value of s from s 9 
according to s — s *R mod n, where R > n, values of n and R being used by both the 
prover device and the verifier device. 

8. (CURRENTLY AMENDED) The method of claim 4 in which the 
Montgomery multiplications of s x m s y r x m r, and r x m s e are carried out according to 
the formula a x m b = abK~ l mod n, where R > n, values of n and R being used by both 
the prover device(±0) and the verifier device-(£Q). 

9. (CURRENTLY AMENDED) The method of claim 5 in which the 
Montgomery multiplications ofy x m y and s 2 x m x are carried out according to the 
formula ax m b = abRT 1 mod n, where R > values of n and R being used by both the 
prover devicefW) and the verifier device-{3€>). 

10. (ORIGINAL) The method of claim 1 in which all computations in the 
zero knowledge protocol are performed using Montgomery representation of numbers 
and using Montgomery multiplication operations. 

1 1 . (CURRENTLY AMENDED) The method of claim 3 including the 
steps of: 

(i) providing(303) to the verifier device a value s e being the Montgomery 
e th power of the secret number s; 
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(ii) computing-{3Q6), by the prover device (10) , the value x = r c , being the 
Montgomery e th power of r where r is a random number, and transmitting the value of 
x to the verifier device-(30); 

(iii) selecting-(308), by the verifier device, a challenge value of c from the 
set {0, 1, ... e - 1 } and transmitting the challenge value to the prover device; 

(iv) computing-^40), by the prover device, the valuer = r x m s c and 
transmitting(3-H-) the valuer to the verifier device; and 

(v) the verifier device(3£) checking the authenticity of the prover' s 
response according to the values of x 7 y and s e previously received according to the 
challenge value c. 

12. (CURRENTLY AMENDED) The method of claim 1 1 wherein the step 
of checking the authenticity of the prover' s response comprises the step of: 

computing (3 13,314) the values of >> e and x x m s ec and checking that they are 
the same. 

13. (CURRENTLY AMENDED) The method of claim 1 1 or claim 12 
further including the steps of repeating steps (ii) to (v) for a number of consecutive 
rounds to confirm the authenticity of the prover device. 

14. (CURRENTLY AMENDED) A prover devicefW) having contained 
therein a secret number s in Montgomery representation, the device adapted for 
proving the knowledge of the secret number s to a verifier device without conveying 
knowledge of the secret number itself, with a zero-knowledge protocol using the 
Montgomery representation of numbers and Montgomery multiplication operations 
therein. 

15. (CURRENTLY AMENDED) The prover device of claim 14 further e 
including: 

means(42) for selecting a random number, r; 

means(4-t) for computing the Montgomery squareof r to obtain x; 

means for transmitting x to a verifier device (30); 

means (11) for receiving a challenge value, e; 
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means (44)-for computing the Montgomery product ofy = r x m s; and 
means for transmitting y to the verifier device (50). 

16. (CURRENTLY AMENDED) The prover device of claim 14 further 
including: 

means (15) for selecting a random number, r; 

means (44} for computing the Montgomery e th power of r to obtain jc; 
means for transmitting x to a verifier device; 
means(±+) for receiving a challenge value, c; 

means(4-t) for computing the Montgomery product ofy = rx m s; and 
means for transmitting y to the verifier device. 

1 7. (CURRENTLY AMENDED) A verifier device(50) for verifying the 
knowledge of a secret number s in a prover device without knowledge of the secret 
number itself, with a zero-knowledge protocol using the Montgomery representation 
of numbers and Montgomery multiplication operations therein. 

18. (CURRENTLY AMENDED) The verifier device(£0) of claim 1 7 
further including: 

means(34) for receiving the Montgomery square v of the secret number s; 

means(34) for receiving the Montgomery square, x of a random number, r; 

means(5+) for transmitting a challenge value, e to the prover device; 

means(34) for checking the authenticity of the prover' s response, y according 
to the Montgomery square ofy verified against values of x and / or v received from 
the prover device according to the challenge value, e. 

19. (CURRENTLY AMENDED) The verifier device of claim 17 further 
including: 

means for receiving the Montgomery e th power, s e of the secret number 5; 
means for receiving the Montgomery e th power, jc of a random number, r; 
means for transmitting a challenge value, c to the prover device; 
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means(3-t) for checking the authenticity of the prover's response, y according 
to the Montgomery e th power of y verified against the value of x x m s ec received from 
the prover device, according to the challenge value, c. 

20. (CURRENTLY AMENDED) A method of proving the knowledge of a 
secret number s in a prover device£l-0) to a verifier device(3Q) having no knowledge 
of the secret number, with a zero-knowledge protocol using the Montgomery 
representation of numbers and Montgomery multiplication operations therein, 
comprising the steps of: 

selecting(3£5) a random number, r; 

computing(3Q6) the Montgomery e th power of r to obtain x; 
transmitting^©^) x to a verifier device; 
receiving a challenge value, c; 

computing(34G) the Montgomery product ofy = r x m s c ; and 
transmitting(34±)>' to the verifier device. 

2 1 . (CURRENTLY AMENDED) A method of verifying the knowledge of a 
secret number s in a prover deviceftO) by a verifier device(3Q) having no knowledge 
of the secret number, with a zero-knowledge protocol using the Montgomery 
representation of numbers and Montgomery multiplication operations therein, 
comprising the steps of: 

receivingf+05) the Montgomery square v of the secret number s; 

receivingftO?) the Montgomery square, x of a random number, r; 

transmittingfWS) a challenge value, e to the prover device; 

checking the authenticity of the prover's response, y according to the 
Montgomery square of y verified against values of x and / or v received from the 
prover device according to the challenge value e. 

22. (CURRENTLY AMENDED) A method of verifying the knowledge of 
a secret number s in a prover device(40) by a verifier device(30) having no knowledge 
of the secret number, with a zero-knowledge protocol using the Montgomery 
representation of numbers and Montgomery multiplication operations therein, 
comprising the steps of: 
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receiving(30£) the Montgomery e th power of the secret number s; 

receiving^*©?) the Montgomery e th power, x of a random number, r; 

transmitting(308) a challenge value, c to the prover device; 

checking(3+S) the authenticity of the prover' s response, y according to the 
Montgomery e th power of y verified against the value of x x m s ec received from the 
prover device according to the challenge value c. 

23. (CURRENTLY AMENDED) A computer program product, 
comprising a computer readable medium having thereon computer program code 
means adapted, when said program is loaded onto a computer, to make the computer 
execute the procedure of any one of claims 1 to 13 and 19 to 22 claim 1 . 

24. A computer program, distributable by electronic data transmission, 
comprising computer program code means adapted, when said program is loaded onto 
a computer, to make the computer execute the procedure of any one of claims 1 to 13 
and 19 to 22 claim 1 . 

25. (ORIGINAL) Apparatus substantially as described herein with 
reference to the accompanying drawings. 

26. (ORIGINAL) A method substantially as described herein with 
reference to the accompanying drawings. 
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